Threats Tagged 'cve-2026-15901'

A use-after-free vulnerability exists in the Network component of Google Chrome versions prior to 150.0.7871.128. This flaw allows a remote attacker to potentially exploit heap corruption by crafting a malicious HTML page. The vulnerability is classified as critical due to its potential impact on confidentiality, integrity, and availability.

A use-after-free vulnerability exists in the Network component of Google Chrome prior to version 150.0.7871.128. This flaw allows a remote attacker to potentially cause heap corruption by crafting a malicious HTML page. The vulnerability has been assigned CVE-2026-15901 and is rated critical with a CVSS score of 9.6. The issue affects Chrome versions before 150.0.7871.128. No explicit patch or remediation level is stated in the provided data, but a vendor advisory link is available for further details.

Multiple security issues affecting chromedriver versions prior to 150.0.7871.128 have been fixed in the chromedriver-150.0.7871.128-1.1 package for openSUSE Tumbleweed. These vulnerabilities include use-after-free (CWE-416) and others, collectively rated with medium severity. The issues are addressed in this updated package, which is available for affected architectures including aarch64 and ppc64le.